Vulnerability Description
The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log into arbitrary user accounts associated with the same organization, and send messages, read messages, read contact lists, or cause a denial of service (login unavailability), via unspecified vectors.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Rim | Blackberry Enterprise Server | 5.0.3 |
| Lotus | Domino | All versions |
| Microsoft | Exchange Server | All versions |
Related Weaknesses (CWE)
References
- http://secunia.com/advisories/46370Vendor Advisory
- http://securitytracker.com/id?1026179
- http://www.blackberry.com/btsc/KB28524ExploitVendor Advisory
- http://www.osvdb.org/76286
- http://www.securityfocus.com/bid/50064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70519
- http://secunia.com/advisories/46370Vendor Advisory
- http://securitytracker.com/id?1026179
- http://www.blackberry.com/btsc/KB28524ExploitVendor Advisory
- http://www.osvdb.org/76286
- http://www.securityfocus.com/bid/50064
- https://exchange.xforce.ibmcloud.com/vulnerabilities/70519
FAQ
What is CVE-2011-0290?
CVE-2011-0290 is a vulnerability with a CVSS score of 6.5 (MEDIUM). The BlackBerry Collaboration Service in Research In Motion (RIM) BlackBerry Enterprise Server (BES) 5.0.3 through MR4 for Microsoft Exchange and Lotus Domino allows remote authenticated users to log i...
How severe is CVE-2011-0290?
CVE-2011-0290 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2011-0290?
Check the references section above for vendor advisories and patch information. Affected products include: Rim Blackberry Enterprise Server, Lotus Domino, Microsoft Exchange Server.